From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from jazzband.ncsc.mil (jazzband.ncsc.mil [144.51.5.4]) by tycho.ncsc.mil (8.9.3/8.9.3) with ESMTP id OAA15444 for ; Tue, 16 Jul 2002 14:58:52 -0400 (EDT) Received: from jazzband.ncsc.mil (localhost [127.0.0.1]) by jazzband.ncsc.mil with ESMTP id SAA12237 for ; Tue, 16 Jul 2002 18:57:22 GMT Received: from gull.mail.pas.earthlink.net (gull.mail.pas.earthlink.net [207.217.120.84]) by jazzband.ncsc.mil with ESMTP id SAA12233 for ; Tue, 16 Jul 2002 18:57:22 GMT Received: from crtntx1-ar7-4-35-055-073.crtntx1.elnk.dsl.genuity.net ([4.35.55.73] helo=donkey) by gull.mail.pas.earthlink.net with esmtp (Exim 3.33 #1) id 17UXX2-00048u-00 for selinux@tycho.nsa.gov; Tue, 16 Jul 2002 11:58:45 -0700 From: "Ryan Bergauer" To: Subject: user mount permissions Date: Tue, 16 Jul 2002 13:58:44 -0500 Message-ID: <000001c22cfa$cf985bb0$0300a8c0@donkey> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0001_01C22CD0.E6C253B0" Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov This is a multi-part message in MIME format. ------=_NextPart_000_0001_01C22CD0.E6C253B0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit I'm want to allow users to be able to mount an encrypted directory in their home directory. Unfortunately, this requires allowing normal users to transition into mount_t via a mount executable, which I think would be wise to avoid. Is there a good way to allow users to mount only a certain type, say user_home_t (or in my case, crypt_home_t)? Thanks! ------=_NextPart_000_0001_01C22CD0.E6C253B0 Content-Type: text/html; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable

I’m want to allow = users to be able to mount an encrypted directory in their home directory. = Unfortunately, this requires allowing normal users to transition into mount_t via a mount executable, which I think would be wise to avoid. Is there a = good way to allow users to mount only a certain type, say user_home_t (or in my case, crypt_home_t)? = Thanks!

------=_NextPart_000_0001_01C22CD0.E6C253B0-- -- You have received this message because you are subscribed to the selinux list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.